Static task
static1
Behavioral task
behavioral1
Sample
008e8924af6e43daeb60909cb98afed1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
008e8924af6e43daeb60909cb98afed1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
008e8924af6e43daeb60909cb98afed1_JaffaCakes118
-
Size
267KB
-
MD5
008e8924af6e43daeb60909cb98afed1
-
SHA1
ccac9dc571cc5f87f53d1d31490d01005b5aabfe
-
SHA256
2b599fe9304066b2cba4ccb6c7816a079455df1209e9e826adb2a7ef5567cf56
-
SHA512
2ecc1caae69a61d582815afefda6682385b93f5f5ca4d71fc5de77d768aca641c0ebd93bebf0c3cae6d97e2885624c47fbe809e5cd65b345879e92d5177cf1db
-
SSDEEP
6144:7X2SacYKT7w6pynVEqawKyMwVsfEO5iTlhOIHziOJ6ouvOAAKa:7LacPinVIfeCIHziOJ6dOAF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008e8924af6e43daeb60909cb98afed1_JaffaCakes118
Files
-
008e8924af6e43daeb60909cb98afed1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 259KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 85B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 379B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 385B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ